This vulnerability affects EMQ EMQX Enterprise up to version 6.1.0 and stems from improper authorization in an unspecified function within the session handling component. The flaw allows remote attackers with low privileges to perform unauthorized actions without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 5.3, indicating medium severity. The vendor has not provided any advisory or patch, and no official remediation level is indicated. Exploit code has been publicly disclosed but no known exploits are reported in the wild.

The vulnerability enables remote attackers with low privileges to bypass proper authorization controls in the session handling component of EMQ EMQX Enterprise, potentially allowing unauthorized access or actions. The impact is limited by the requirement of low privileges and the absence of user interaction or elevated privileges. No further impact details are provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a patch, users should monitor official EMQ channels for updates. Until a fix is available, restrict access to EMQX Enterprise instances and apply compensating controls to limit exposure where possible.